From 5da9d9a4c8dc6f22ef249a7c9ff9fb82c855cd6a Mon Sep 17 00:00:00 2001
From: Andreas Koepf <andreas.koepf@provisio.com>
Date: Thu, 6 Feb 2025 07:26:50 +0100
Subject: [PATCH] move workflow permissions to job level

---
 .github/workflows/pre-commit.yml | 7 +++----
 1 file changed, 3 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/pre-commit.yml b/.github/workflows/pre-commit.yml
index 8bf7ae71..f44dd6d5 100644
--- a/.github/workflows/pre-commit.yml
+++ b/.github/workflows/pre-commit.yml
@@ -1,9 +1,5 @@
 name:  Pre-commit Checks
 
-permissions:
-  contents: read
-  pull-requests: write
-
 on:
   pull_request:
     branches: [ main ]
@@ -11,6 +7,9 @@ on:
 jobs:
   pre-commit:
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      pull-requests: write  # This is needed for commenting on PRs
     steps:
     - uses: actions/checkout@v4
     - uses: actions/setup-python@v4